The atelier

Privacy Policy.

1. Who we are.

Ganzotrade Ltd, Triq G. Lanzon 19, Marsaskala MSK3391, Malta, is the data controller. Contact: ganzotradeltd@gmail.com / +356 99754395.

2. What we collect.

Name, delivery and billing address, email, phone number, order history, and technical data (IP address, browser type, cookies). Payment details are handled directly by Stripe — we do not store full card numbers.

3. Why we use it and legal basis.

To process your order and deliver products — contract performance.
To meet tax and accounting obligations — legal obligation (Maltese tax law requires we keep records for 10 years).
To prevent fraud and secure our website — legitimate interest.
To send marketing emails, where applicable — consent (you can withdraw at any time).

4. Who we share it with.

Our payment processor (Stripe, Ireland), shipping courier, website host, and accountant. All are bound by GDPR-compliant agreements.

5. How long we keep it.

Order and tax records: 10 years (Maltese law). Account and marketing data: until you ask us to delete it or withdraw consent.

6. Your rights.

You can request access to, correction of, or deletion of your data, restrict or object to processing, and request portability. Contact ganzotradeltd@gmail.com. You can also lodge a complaint with the Maltese Information and Data Protection Commissioner (idpc.org.mt).

7. Cookies.

We use essential cookies to make the site work, and analytics cookies with your consent via our cookie banner.

8. International transfers.

Stripe may process data in the United States under EU-approved Standard Contractual Clauses.

9. Updates.

We may update this policy; the date of the latest version is shown at the top.